Title
Seeding clouds with trust anchors
Abstract
Customers with security-critical data processing needs are beginning to push back strongly against using cloud computing. Cloud vendors run their computations upon cloud provided VM systems, but customers are worried such host systems may not be able to protect themselves from attack, ensure isolation of customer processing, or load customer processing correctly. To provide assurance of data processing protection in clouds to customers, we advocate methods to improve cloud transparency using hardware-based attestation mechanisms. We find that the centralized management of cloud data centers is ideal for attestation frameworks, enabling the development of a practical approach for customers to trust in the cloud platform. Specifically, we propose a cloud verifier service that generates integrity proofs for customers to verify the integrity and access control enforcement abilities of the cloud platform that protect the integrity of customer's application VMs in IaaS clouds. While a cloud-wide verifier service could present a significant system bottleneck, we demonstrate that aggregating proofs enables significant overhead reductions. As a result, transparency of data security protection can be verified at cloud-scale.
Year
DOI
Venue
2010
10.1145/1866835.1866843
cloud computing
Keywords
Field
DocType
cloud platform,cloud computing,load customer processing,trust anchor,customer processing,data security protection,cloud data center,cloud transparency,iaas cloud,integrity measurement,seeding cloud,cloud vendor,cloud verifier service,access control,data processing,data center,data security
Transparency (graphic),Bottleneck,Data processing,Internet privacy,Data security,Computer security,Computer science,Cloud computing security,Enforcement,Access control,Cloud computing
Conference
Citations 
PageRank 
References 
56
1.97
20
Authors
5
Name
Order
Citations
PageRank
Joshua Schiffman128421.79
Thomas Moyer220512.19
Hayawardh Vijayakumar31348.37
T Jaeger42635255.67
P. McDaniel57174494.57